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[edit class-of'Service] Hierarchy Level 



class-of-service { 
input { 
fpc fpc-number{ 

precedence-map map-name; 

} 

interfaces { 

interface-name { 

inet-precedence-map; 
mpls-cos-map; 
unit unit-number { 

output-queue queue-number \ 

) 

) 

} 

precedence-map map-name { 

bits precedence-bit output-queue queue-number; 

> 

> 

output { 

drop-profile profile-name { 
stream-profile { 

fili-level f/ll-percentage drop-probability probability-percentage; 

} 

pip-set-queue-profile { 

fill-level mi-percentage drop-probability probability-percentage; 

} 

plp-c!ear-queue-profile { 

fill-level fill-percentage drop-probability probability-percentage; 

} 

} 

fpc fpc-number{ 

d ro p-p rof i I e profiJe-nam e ; 

} 

interfaces { 
interface-name { 
transmit-queues { 

output-queue queue-number bandwidth percentage; 

} 

weighted-round-robin { 

output-queue queue-n umber weight percentage; 

} 

unit unit-number { 
precedence-rewrite { 

output-queue queue-number { 

pip-clear rewrite-bits precedence-bit, 
pip-set rewrite-bits precedence-bit, 

} 

} 

} 

} 

} 

} 

policy { 

class class-name { 
classification-override { 

output-queue queue-number; 

) 

} 

} 

} # End of [edit class-of-servtce] hierarchy level 
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sonet-options { 
aps{ 

advertise-interva I milliseconds ; 
authentication-key key; 
force; 

hoid-time milliseconds; 
lockout; 

neighbor address; 
paired-group group-name; 
protect-circuit group-name; 
request; 

revert-time seconds; 
working-circuit group-name; 



bytes { 

el-quiet value; 
fl value; 
f2 value; 
si value; 
z3 value; 
z4 value; 



fcs (32 1 16); 

loopback (local | remote); 

path-trace trace-string; 

(payload-scrambler | no-payload-scrambler); 

rfc-2615; 

(zO-increment | no-zO-increment); 

} 

speed {10m 1 100m); 
tl-options { 

buiidout (0-133 | 133-266 | 266-399 | 399-532 | 532-655); 

byte-encoding (nx64 | nx56); 

fcs (32 | 16); 

framing (sf | esf); 

idle-cycie-flags (flags | ones); 

invert-data; 

line-encoding (ami | b8zs); 
loopback (local | remote); 
start-end-flag (shared | filler); 
timeslots slot-number; 

} 

t3-options { 

bert-algorithm algorithm; 
bert-error-rate rate; 
bert-period seconds; 
(cbtt-parity | no-cb it-parity); 

compatibility-mode (digital-link | kentrox | larscom) <subrate vafue>; 
fcs (32 1 16); 

(feac-loop-respond | no-feac-!oop-respond); 
idie-cycte-flag value; 
(long-build out | no-long-buildout); 
loopback (local | remote); 
(payload-scrambler | no-payload-scrambler); 
start-end-fiag value; 



traceoptions { 

flag flag <flag-modifier> <disable>; 



} 



transmit-bucket { 

overflow (tag | discard); 
rate speed; 
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Isp-lifetime seconds; 
no-authentication-check; 
overload <timeout $econds>; 
reference-bandwidth reference-bandwidth ; 
traffic-engineering { 

disable; 

shortcuts; 

} 

traceoptions { 

file name <replace> <stze size> <files number> <no-stamp> 

<{worid-readable | no-world-readable)>; 
flag flag <flag-modifier> <disable>; 

1 

interface interface-name { 
disable; 

csnp-irrtervaf seconds; 

hello-authentication-key key; 

h ello-a uth enticati on-type authen tica tion ; 

Isp-interval milliseconds; 

mesh-group {value | blocked); 

passive; 

level level-number { 
disable; 

hello-authentication-key key, 
heilo-authe nticati o n-type a uthentica tion ; 
hello-interval seconds; 
hold-time seconds; 
metric metric; 
passive ; 
priority priority; 
te-metric metric; 

> 

} 

} # End of [edit protocols isis] hierarchy level 

LDP Idp { 

interface interface-name { 
disable; 

heilo-interval seconds; 
hold-time seconds; 

) 

keepalive-interval seconds; 
keepalive-timeout seconds; 
preference preference; 
traceoptions { 

file name <rep]ace> <size s/ze> <fi!es number> <no-stamp> 

<{worid-readable ] no-world-readable)>; 
flag flag <f lag-modi fier> <disable>; 

} 

} # End of [edit protocols idp] hierarchy (eve( 

MPLS mpls { 

disable; 

no-propagate-ttl; 
admin-groups { 

group-name group-value; 

) 

fog-updo wn { 

(sysiog | no-syslog); 
{trap | no-trap); 
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flag flag <flag-modifier> <disable>; 



} 



group group-name { 
disable; 

export [ policy-names ]; 
import [ policy-names ]; 
local-address address: 
traceoptions { 

file name <repiace> <size size> <files number> <no-stamp> 

<{world-readable ] no-world-readable)>; 
flag flag <flag-modifier> <disable>; 



peer address; { 
disable; 

export [ policy-names J; 
import [ policy-names ]; 
local-address address ; 
mode <{mesn-group | standard)>; 
traceoptions { 

file name <replace> <size size> <files number> <no-stamp> 

<(world-readabJe | no-worfd-readab(e)>; 
flag flag <flag-modifier> <disable>; 

} 

} 

} 

} #End of [edit protocols msdp] hierarchy level 

ospf { 
disable; 

export [ policy-names }; 
external-preference preference; 
preference preference; 
reference-ba ndwidth reference-bandwidth ; 
traffic-engineering { 

no-topology; 

shortcuts; 



traceoptions { 

file name <tep\ace> <size s')ze> <fi)es numbers <no-stamp> 

<(world-readable | no-world~readabie}>; 
flag flag <fiag-modifier> <disable>; 



area area-id { 

area-range network/ma sklen <restrict>; 
authentication-type authentication; 
interface interface-name { 
disable; 

authentication-key key< key-id identifier; 
dead-interval seconds; 
hello-interval seconds; 
interface-type type; 
metric metric; 

neighbor address <eJigibie>; 
passive; 

poll-interval seconds; 
priority priority; 
retransmit-interval seconds; 
transit-delay seconds; 
transrmt-interval seconds; 



> 



} 
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Router Discovery 



RSVP 



flag flag <flag-modifier> <disable>- 

} 

authentication-key password; 
authentication-type type; 
(check-zero \ no-check-zero) ; 
import [policy]; 
message-size number; 
metric-in metric ; 
receive receive-options; 
send send-optlons; 
group group-name { 
export [policy]; 
metric-out metric; 
preference preference ; 
neighbor neighbor-name { 

authentication-key password; 

authentication-type type; 

{check-zero | no-check-zero); 

import [po//cyj; 

message-size number; 

metric-in metric; 

receive receive-options; 

send send-optlons; 

} 

} 

] # End of [edit protocols rip} hierarchy level 

router-discovery { 
disable; 
traceoptions { 

file name <repiace> <size size> <files number> <no-stamp> 

<(world-readable | no-world-readable)>; 
flag flag <flag-modifler> <disabie>; 

interface interface-name { 
min-advertisement-interval seconds; 
max-advertisement-interval seconds; 
lifetime seconds; 



address address { 
(advertise | ignore); 
(broadcast j multicast); 
(priority priority | ineligible); 

} 

) # End of [edit protocols router-discovery] hierarchy level 

rsvp{ 
disable; 

keep-multiplier number; 
refresh-time seconds; 
traceoptions { 

file name <replace> <size size> <files number> <no-stamp> 

<(world-readable | no-wor!d-readabie)>; 
ffag flag <flag-modifier> <disabie>; 



interface interface-name { 
disable; 

(aggregate | no-aggregate); 
authentication-key key; 
bandwidth bps; 
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[edit routing-options] Hierarchy Level 



routing-options { 
aggregate { 
defaults { 

(active | passive); 

as-path <a$-path> <origin (egp | igp | incomplete | nonej> <atomic-aggregate> 

oggregator as-number in-address>; 
community ([ community-ids ] \ no-advertise | no-export | no-ex port-subconfed | none); 
(fufl | brief); 

(metric J metric2 | metric3 | metric4) value; 
(preference | preference2 | color | co!or2) preference; 
(tag | tag2) string; 



route destination-prefix { 
policy policy-name; 
(active | passive); 

as-path <as-path~> <origin (egp | igp | incomplete | none)> <atomic-aggregate> 

oggregator as-number in-address>; 
community (I community-ids } | no-advertise | no-export | no-export-subconfed | none); 
(full | brief); 

(metric j metric2 | metric3 | rnetncA) value; 
(preference | preference2 | color ] color2) preference; 
(tag | tag2) string; 

> 

} 

autonomous-system autonomous-system <loops numbei>; 

confederation confederation-autonomous-system members autonomous-system; 

forwarding-tabfe { 

export [ policy-names }; 

) 

generate { 
defaults { 

(active | passive); 

as-path <as-path> <origin (egp | igp | incomplete | none)> <atomic-aggregate> 

oggregator as-number in~address>; 
community ([ community-ids ] \ no-advertise | no-export | no-export-subconfed | none); 
(full | brief); 

(metric | metric2 | metric3 | metric4) value; 
(preference j preference2 | color J color2) preference; 
(tag | tag2) string; 



route destination-prefix { 
policy policy-name; 
(active [ passive); 

as-path <as-path> <origin (egp | igp | incomplete | none)> <atomic-aggrsgate> 

oggregator as-number in-address>; 
community ([ community-ids ] | no-advertise | no-export | no-export-subconfed | none); 
(full | brief); 

(metric j metric2 | metnc3 | metric4) value; 
(preference | preference2 | color | color2) preference; 
(tag | tag2) string; 

} 

} 

interface-routes { 
rib-group routing-table-name; 

} 

martians { 

destination-prefix match-type <aliow>; 

} 




multicast { 
scope scope-name { 
interface interface-name; 
prefix destination-prefix; 

} 

) 

options { 

syslog (level level | upto level); 

} 

rib routing-table { 
static { 
defaults { 

(active | passive); 

as-path <as-path> <origin (egp j igp | incomplete | none)> <atomic-aggregate> 

oggregator as-number in-address>; 
community ([ community-ids ] | no-advertise | no-export | no-export-subconfed | none); 
(install | no-install); 

(metric | metric2 | metric3 | metric4) value; 
(preference | preference2 ) color j coior2) preference; 
(readvertise | no-readvertise); 
(no-retain | retain); 
(tag | tag2) string; 



route destination-prefix { 
next-hop; 
(active | passive); 

as-path <as-path> <origin (egp | igp | incomplete | none)> <atomic-aggregate> 

oggregator as-number sn-address>; 
community ([ community-ids } | no-advertise ] no-export | no-export-subconfed | none); 
(install | no-install); 

(metric | metric2 | metric3 | metric4) value; 
(preference | preference2 j color j color2) preference; 
(readvertise | no-readvertise); 
(no-retain j retain); 
(tag | tag2) string; 



defaults { 

{active J passive); 

as-path <as-path> <origin (egp | igp | incomplete | none)> <atomic-aggregate> 

oggregator as-number in-address>; 
community ([ community-ids ] \ no-advertise j no-export | no-export-subconfed J none); 
(full | brief); 

(metric | metric2 | metric3 | metric4) value; 
(preference | preference2 | color | co!or2) preference] 
(tag | tag2) string; 



route destination-prefix { 
policy policy-name; 
(active | passive); 

as-path <as-path> <origin (egp j igp | incomplete | none)> <atomic-aggregate> 

oggregator as-number in-address>; 
community ([ community-ids ] | no-advertise | no-export | no-export-subconfed | none); 
(full | brief); 

(metric | metric2 | metnc3 | metric4) value; 
(preference J preference2 | color | color2) preference; 
(tag | tag2) string; 



} 

aggregate { 
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generate { 
defaults { 

(active | passive); 

as-path <as-path> <origin (egp | igp | incomplete | none)> <atomic-aggregate> 

oggregator as-number in-address>; 
community ([ community-ids ] | no-advertise | no-export j no-export-subconfed | none); 
(full | brief); 

{metric j metric2 | metric3 | metric4) value; 
(preference | preference2 | color [ color2) preference; 
(tag j tag2) string; 

1 

route destination-prefix { 
policy policy-name; 
(active \ passive); 

as-path <as-path> <origin (egp | igp | incomplete | none)> <atomic-aggregate> 

oggregator as-number in-address>; 
community ([ community-ids } | no-advertise | no-export ( no-export-subconfed | none); 
(full | brief); 

(metric | metric2 | metric3 | metric4) value; 
(preference | preference2 | color | co!or2) preference; 
(tag | tag2) string; 

) 

} 

martians { 

destination-prefix match-type <allow>; 

) 

} 

rib-groups { 
group-name { 

import-rib [ group-name ]; 
export-rib group-name; 

) 

} 

router-id address ; 
static { 
defaults { 

(active | passive) ; 

as-path <as-path> <origin (egp | igp j incomplete [ none)> <atomic-aggregate> 

oggregator as-number in-address>; 
community ([ community-ids ] | no-advertise | no-export | no-export-subconfed | none); 
(install | no-install); 

(metric | metric2 j metric3 | metric4) value; 
(preference | preference2 | color | color2) preference; 
{readvertise [ no-readvertise); 
(no-retain | retain); 
(tag | tag2) string; 

} 

route destination-prefix { 
next-hop; 
(active | passive); 

as-path <as-path> <origin (egp | igp | incomplete | none)> <atomic-aggregate> 

oggregator as-number in-address>; 
community ([ community-ids ] | no-advertise | no-export | no-export-subconfed | none); 
(install | no-install); 

(metric | metric2 | metric3 | metric4) value; 
(preference | preference2 | color | color2) preference; 
{readvertise | no-readvertise); 

(no-retain | retain); FIGURE 1 7C 

(tag [ tag2) string; 

} 

} 

traceoptions { 

file name <repface> <size size> <files number> <no-stamp> 

<(worfd-readable | no-worid-readable)>; 
flag flag<flag-modifier> <disable>; 

} 

} # End of [edit routing-options] hierarchy ievel 



[edit system] Hierarchy Level 



system { 

authentication-order [ authentication-methods ]; 
backup-router address destination destination-address>; 
compress-configuration-fiies; 
default-address-selection; 
dhcp-refay (server address | disable); 

diag-port-authentication (encrypted-password "password" | plain-text-pas sword); 
domain-name domain-name; 
domain-search [domain-fist]; 
host-name host-name; 
location { 

altitude feet; 

country-code code; 

hcoord horizontal-coordinate; 

lata service-area; 

latitude degrees; 

longitude degrees; 

npa-nxx number; 

postal-code postal-code; 

vcoord vertical-coordinate; 

} 

login ( 
message text; 
class class-name { 

ailow-commands "regular-expression" ; 
deny-commands "regular-expression "; 
idle-timeout minutes; 
permissions [ permissions ]; 

) 

user user-name { 
full-name complete-name; 
uid uid-value; 
class class-name; 
authentication { 

(encrypted-password "password" | plain-textpassword); 

ssh-rsa "public-kef; 

} 

} 

} 

name-server { 
address; 

FIGURE 19a Ledi™* 

ntp{ 

authentication-key key-number type type value password; 
boot-server address; 

broadcast <address> <key key-number> <version value> <ttl value>; 

broadcast-client; 

multicast-client <address>; 

peer address <key key-number> <version value> <prefer>; 
server address <key key-number <version va!ue> <prefer>; 
trusted-key [ key-numbers ]; 

} 

ports { 
auxiliary { 
insecure; 
speed baud-rate; 
type terminal-type; 

) 

console { 
insecure; 
speed baud-rate; 
type terminal-type; 



} 

J 

processes f 

inet-process (enable | disable); 
interface-control (enable | disable); 
mib-process (enable | disable}; 
ntp (enable | disable); 

routing (enable | disable); 
snmp (enable | disable); 

watchdog (enable | disable) <timeout seconds>; 

} 

radius-server server-address { 
port number; 
retry number; 
secret password; 
timeout seconds; 

} 

root-authentication { 

(encrypted-password "password" j piain-text-password); 
ssh-rsa "public-kef; 

} 

services { 

finger <connection-limit Hmit> <rate-limit timit>; 
ssh <connection-limit Umit> <rate-limit limit>; 
telnet <connect/on-limit tfmlt> <rate-iimit limit>; 

} 

static-host-mapping { 
host-name { 
inet [ address ]; 
sysid system-identifier; 
alias [ alias ]; 

} 

> 

sysiog { 
file filename { 
facility level; 
archive { 

files number; 
size size; 

(world-readable | no-world-readable}; 

} 

} 

host hostname { 
facility level; 
facility-override facility; 
log-prefix string; 

} 

user (username | *) { 
facility level; 

} 

console { 
facility level; 

} 

archive { 
files number; 
size size; 

(world-readable | no-world-readable}; 

} 

} 

tacplus-server server-address { 
secret password; 
single-connection; 
timeout seconds; 

) 

time-zone time-zone; 
}} # End of [edit system] hierarchy level 
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